Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FE19366F9F11F08F4D6EE7DAE4EC9C.roa
File: 56FE19366F9F11F08F4D6EE7DAE4EC9C.roa (raw, json)
Hash identifier: CSYkk1pslKHkF+tsoxFBIcHhL3hH+n3YdiXrYtdPr50=
Subject key identifier: 7C:80:66:2F:7A:57:73:B3:65:7B:20:A3:12:F5:26:2A:30:26:C7:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016888
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FE19366F9F11F08F4D6EE7DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:51:00 +0000
ROA not before: Sat 02 Aug 2025 12:50:52 +0000
ROA not after: Sun 07 Sep 2025 12:50:52 +0000
asID: 399989
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92296 (0x16888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 12:50:52 2025 GMT
Not After : Sep 7 12:50:52 2025 GMT
Subject: CN=688e09b4-5c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:2f:34:79:45:b0:41:2d:fe:1d:0e:61:e8:
aa:98:bf:4c:e8:51:c4:86:9d:ad:1a:b2:da:68:4e:
a2:70:b9:46:2a:95:ae:37:35:09:3f:48:33:aa:38:
9c:09:3b:a7:96:35:14:6e:0b:23:fe:ee:06:c7:49:
c0:4f:10:44:0e:6d:b6:0a:de:8f:67:72:da:61:3a:
4f:ff:a7:d4:32:d7:87:c1:c0:ac:a2:b3:5e:e6:c9:
ed:6b:33:e2:24:ef:b5:63:ef:a6:58:ba:f2:3d:f1:
84:ec:63:d8:d5:f0:17:16:35:ab:7b:38:b9:25:d0:
e3:67:19:36:8a:7e:68:f0:9e:df:a8:d7:60:52:32:
d6:09:c1:60:e0:da:55:5c:34:39:77:63:02:c2:25:
9c:87:86:7e:b4:02:cb:8c:47:9e:ee:1f:7d:db:5f:
cd:54:d0:e3:51:ea:b1:ee:3b:f6:71:04:b8:b5:b4:
a7:0d:86:3d:1a:12:15:89:e8:c9:47:ce:e2:f8:ff:
ec:c9:f7:f2:2d:0e:de:90:fc:5e:da:8d:4b:ce:16:
83:01:aa:79:6e:d0:bd:ed:45:2e:1b:b3:9a:f6:d4:
06:26:ac:a8:2d:48:39:dd:cf:fe:ee:a3:59:9c:48:
32:de:27:e1:4f:df:9a:89:72:c1:06:15:c7:e1:46:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:66:2F:7A:57:73:B3:65:7B:20:A3:12:F5:26:2A:30:26:C7:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56FE19366F9F11F08F4D6EE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:40:3d:a1:af:d8:e2:0b:ae:a1:e7:7f:2a:ae:d8:db:3a:51:
62:87:83:f4:f5:ed:e1:09:03:a7:bc:30:d8:23:0b:1e:f9:92:
eb:99:69:1c:c0:c3:83:38:52:6f:b2:71:2d:d4:04:3b:1b:78:
51:2b:65:50:bf:30:cd:76:33:7c:e1:4e:f7:34:80:05:bb:83:
24:00:9e:a1:ef:24:b0:4e:c8:1b:18:8d:ab:dc:5e:75:69:06:
f5:bd:31:b3:92:9e:9d:4f:40:4b:7a:48:2c:80:42:e9:2a:d6:
f7:44:98:a0:7b:18:d2:3e:92:93:08:e8:8c:02:08:ed:18:6d:
01:94:8a:a4:90:ca:75:94:cb:30:5e:fa:bd:14:b1:60:fa:e3:
a9:c3:cf:58:81:66:60:9a:71:f3:f8:62:c1:cb:80:92:22:63:
a7:90:f3:65:be:33:3c:79:02:7b:ff:a5:ca:b0:6c:73:9c:c0:
1c:1d:59:74:ff:13:49:f3:b2:ed:15:36:4b:2f:af:ba:72:87:
74:c7:6b:3d:f2:68:46:a5:f7:49:f6:3b:5f:c5:c7:64:a5:09:
0e:35:12:a7:a3:94:43:16:87:36:eb:c5:5d:14:b4:b0:99:f5:
bc:e7:20:4b:a5:1e:eb:b2:1d:bb:0a:a2:1b:c0:00:ac:4d:a5:
a8:4f:49:ae
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWiIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODAyMTI1MDUyWhcNMjUwOTA3MTI1MDUyWjAYMRYw
FAYDVQQDEw02ODhlMDliNC01YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZ4vNHlFsEEt/h0OYeiqmL9M6FHEhp2tGrLaaE6icLlGKpWuNzUJP0gz
qjicCTunljUUbgsj/u4Gx0nATxBEDm22Ct6PZ3LaYTpP/6fUMteHwcCsorNe5snt
azPiJO+1Y++mWLryPfGE7GPY1fAXFjWrezi5JdDjZxk2in5o8J7fqNdgUjLWCcFg
4NpVXDQ5d2MCwiWch4Z+tALLjEee7h9921/NVNDjUeqx7jv2cQS4tbSnDYY9GhIV
iejJR87i+P/syffyLQ7ekPxe2o1LzhaDAap5btC97UUuG7Oa9tQGJqyoLUg53c/+
7qNZnEgy3ifhT9+aiXLBBhXH4Ua0gQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHyA
Zi96V3OzZXsgoxL1JiowJseiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NkZFMTkzNjZGOUYxMUYwOEY0RDZFRTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO6wMA0GCSqGSIb3DQEBCwUA
A4IBAQB8QD2hr9jiC66h538qrtjbOlFih4P09e3hCQOnvDDYIwse+ZLrmWkcwMOD
OFJvsnEt1AQ7G3hRK2VQvzDNdjN84U73NIAFu4MkAJ6h7ySwTsgbGI2r3F51aQb1
vTGzkp6dT0BLekgsgELpKtb3RJigexjSPpKTCOiMAgjtGG0BlIqkkMp1lMswXvq9
FLFg+uOpw89YgWZgmnHz+GLBy4CSImOnkPNlvjM8eQJ7/6XKsGxznMAcHVl0/xNJ
87LtFTZLL6+6cod0x2s98mhGpfdJ9jtfxcdkpQkONRKno5RDFoc268VdFLSwmfW8
5yBLpR7rsh27CqIbwACsTaWoT0mu
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:43 2025 by rpki-client